Docket No. 4502-1085 
Appln. No. 10/540,328 

AMENDMENTS TO THE CLAIMS : 

This listing of claims will replace all prior versions, 
and listings, of claims in the application: 

LISTING OF CLAIMS : 

1-20. (canceled) 

21. (currently amended) A method of providing a VPN 
communication between two or more network devices of unknown 
network address at least a first one of which network devices 
does not initially know the other network devices internet 
network addresses, the method comprising: 

providing a verification authority connected to the 
internet remote from the two or more network devices and capable 
of verifying the identity of the two or more internet network 
devices ; 

providing a configuration server connected to the 
internet remote from the two or more network devices and capable 
of supplying to each verified internet device the entire 
configuration data for that verified internet device; 
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providing each of the two or more network devices 
having no provision to permanently store the user configuration 

data, but each of the devices containing configuration 

information only sufficient to connect the devices to an 
internet service provider to request a first IP address, and 
using that first IP address to connect to the remote verification 
authority contact at a designated internet address of the remote 
verification authority , providing within each of the two or more 
network devices, a routine which securely contacts the remote 
verification authority, providing the identity of the network 
device, and using the designated internet address of that remote 
verification authority, and subsequently downloading from a 
remote configuration authority authorized by the remote 
verification authority the entire configuration data each time 
the device is initialized, for one of the two or more internet 
network devices, each time that device is initialized, reloading 
that device with the downloaded configuration data; and 

storing the allocated internet network address of the 
network device at the verification authority, 
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repeating the process for each of the other network 
devices so that each of the other network devices downloads from 
the remote configuration server authorized by the remote 
verification authority the entire configuration data for that 
particular internet network device each time that particular 
device is initialized and reloading that particular device with 
the downloaded configuration data, and storing the allocated 
internet network address for that particular device at the 
verification authority, and initiating a VPN communication 
between two or more of the network devices, by sending an 
instruction from the verification authority to one of the network 
devices by supplying to that network device the allocated 
internet address of at least one of the other network devices so 
that the recipient internet device can communicate with the other 
network device. 

22. (previously presented) The method as claimed in 
claim 22, wherein the two or more network devices are routers. 

23. (previously presented) The method as claimed in 
claim 21, wherein the routers form part of ADSL modems. 

24. (previously presented) The method as claimed in 
claim 21, wherein the configuration data is downloaded as a 
single transaction. 
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25. (previously presented) The method as claimed in 
claim 21, wherein the configuration data is lost when the network 
device loses power. 

26. (previously presented) The method as claimed in 
claim 24, wherein the configuration data remains unchanged for 
the duration of the network devices powered on cycle. 

27. (previously presented ) The method as claimed in 
claim 24, wherein the configuration data is only downloaded upon 
a power up sequence. 

28. (currently amended) A method of providing a VPN 
communication over the internet between two or more internet 
network devices having an allocated or other internet address at 
least a first one of which network devices does not initially 
know the other network devices internet network addresses, the 
method comprising: 

providing a remote authority connected to the internet 
remote from the one or more network devices and capable of 
verifying the identity of the one or more internet network 
devices; and 
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requiring each of the network devices to communicate 
with the remote authority to inform the remote authority of the 
current public IP address of the network device, and storing the 
current public IP address of each network device at the remote 
authority, 

wherein a VPN can be initiated from the remote 
authority by sending a request to at least one of the network 
devices to connect to another of the network devices by sending 
to the at least one network device the current public IP 
addresses of the other network devices to which the at least one 
network device is to be connected^ 

wherein each of the two or more network devices does 
not have any means to permanently store its private configuration 
data instead is provided with configuration information only 
sufficient to contact only an internet service provider to 
request a first IP address, and using that first IP address to 
connect to the remote authority at a designated internet network 
address of the remote authority, and subsequently downloading 
from a remote configuration service authorized by the remote 
authority the entire configuration details and software for the 
specific internet network device each time the device is 
initialized . 
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29. (previously presented) A method as claimed in claim 

28, wherein a user sends a request via secure internet access to 
the remote authority to create a VPN between some or all of the 
network devices whose addresses have been stored at the remote 
authority . 

30. (previously presented) A method as claimed in claim 

29, wherein each of the two or more network devices communicate 
with the remote authority on schedule to send statistics for 
storage and analysis. 

31. (previously presented) A method as claimed in claim 

30, wherein each of the two or more network devices are routers. 

32. (previously presented) A method as claimed in claim 

31, wherein the routers form part of ADSL modems. 

33. (cancelled) 

34. (previously presented) A method as claimed in claim 
33, wherein the configuration details and software are downloaded 
as a single transaction. 
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35. (previously presented) A method as claimed in claim 

34, wherein the configuration details and software are lost when 
the network device loses power. 

36. (previously presented) A method as claimed in claim 

35, wherein the configuration details and software remain 
unchanged for the duration of the network devices "powered on" 
cycle . 

37. (previously presented) A method as claimed in claim 

36, wherein the configuration details and software are only 
downloaded upon a power up sequence. 

38. (previously presented) A method as claimed in claim 
34, wherein the remote authority sends a code to at least one of 
the network devices which forces it to download the configuration 
details and software. 

39. (previously presented) A method as claimed in claim 
34, wherein the user configuration details and software can be 
changed by a user via a secure internet connection to the remote 
authority . 
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